Overview

URL www.apple-payupdate.com/login.php?sessionid=1ecead27955bfc318eae20ac2b0edea4
IP176.123.0.55
ASNAlexhost Srl
Location Moldova
Report completed2022-08-06 08:38:34 UTC
StatusLoading report..
urlquery Alerts Phishing - Apple


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2022-08-06 2 www.apple-payupdate.com/login.php?sessionid=1ecead27955bfc318eae20ac2b0edea4 Phishing
2022-08-06 2 www.apple-payupdate.com/index.php Phishing
2022-08-06 2 www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd Phishing
2022-08-06 2 www.apple-payupdate.com/assets/jquery.mask.js Phishing
2022-08-06 2 www.apple-payupdate.com/assets/inputmask.min.js Phishing
2022-08-06 2 www.apple-payupdate.com/assets/94e6ba80-032a-4187-b37e-18f97830e0f1 Phishing
2022-08-06 2 www.apple-payupdate.com/assets/7da4b777-b616-48b2-9741-e93188fa7b8e Phishing
2022-08-06 2 www.apple-payupdate.com/assets/5c35616a-1611-4f85-93fe-b1ed11b6b346 Phishing
2022-08-06 2 www.apple-payupdate.com/assets/adb102b6-ee7d-4a6d-b5e4-706884f08099 Phishing
2022-08-06 2 www.apple-payupdate.com/assets/32c447e0-bd8d-4cda-9dfc-685286e73a17 Phishing
2022-08-06 2 www.apple-payupdate.com/assets/832568e0-277b-4f1e-a535-b424ac364ac8 Phishing
2022-08-06 2 www.apple-payupdate.com/assets/e5e3cf32-097b-4467-a9a4-1658237506bd Phishing
2022-08-06 2 www.apple-payupdate.com/assets/f48fd45e-da7c-44f5-bb5c-7585a5d61b63 Phishing
2022-08-06 2 www.apple-payupdate.com/assets/f5c6eb7f-0653-44bf-a1f6-eb39f3b9fa91 Phishing
2022-08-06 2 www.apple-payupdate.com/assets/faaa91df-9856-4930-b04b-7cb3d8dc1e34 Phishing
2022-08-06 2 www.apple-payupdate.com/assets/SFProIcons_regular.woff Phishing
2022-08-06 2 www.apple-payupdate.com/assets/shared-icons.woff Phishing
2022-08-06 2 www.apple-payupdate.com/assets/3d61a294-fadc-40e2-b331-f7cd94037998 Phishing
2022-08-06 2 www.apple-payupdate.com/assets/sf-pro-display_regular.woff2 Phishing
2022-08-06 2 www.apple-payupdate.com/assets/ea96e48a-c100-435e-9a03-1793863e22df Phishing
2022-08-06 2 www.apple-payupdate.com/assets/49d37ddb-38c5-4b04-a007-6bef39f81120 Phishing
2022-08-06 2 www.apple-payupdate.com/assets/677a55de-d5b8-4b57-b48d-41e13bae85f1 Phishing
2022-08-06 2 www.apple-payupdate.com/assets/sf-pro-text_regular.woff2 Phishing
2022-08-06 2 www.apple-payupdate.com/assets/c2fae7fa-0fb1-45f0-8366-be5ba335d235 Phishing
2022-08-06 2 www.apple-payupdate.com/assets/95e49370-cf85-4c65-913e-e79dfac4cfe4 Phishing
2022-08-06 2 www.apple-payupdate.com/assets/79f349a7-bca5-4a3e-9cc3-9bd866571017 Phishing
2022-08-06 2 www.apple-payupdate.com/assets/bfb9527d-ebf7-47a2-a203-cf091495c1a4 Phishing
2022-08-06 2 www.apple-payupdate.com/assets/eb3730db-5893-40c4-92b0-d54edaffdb5d Phishing
2022-08-06 2 www.apple-payupdate.com/assets/f9d572ee-4f6f-427a-a60e-50b56e5998cf Phishing
2022-08-06 2 www.apple-payupdate.com/assets/03d107a3-92d3-45f0-b31d-e948535cf5a8 Phishing
2022-08-06 2 www.apple-payupdate.com/assets/SFUIText-Regular.woff Phishing
2022-08-06 2 www.apple-payupdate.com/assets/5614dc8c-ebd9-4cae-b0fb-91dfbdf23fc1 Phishing
2022-08-06 2 www.apple-payupdate.com/assets/e038a977-0275-4fa4-8243-dec3d6e2f4e4 Phishing
2022-08-06 2 www.apple-payupdate.com/assets/18cf3f80-a9bd-4867-b0a4-0c221e3fa7ce Phishing
2022-08-06 2 www.apple-payupdate.com/assets/1a18c530-8633-4494-a6cb-52a28973dbfc Phishing
2022-08-06 2 www.apple-payupdate.com/assets/f2036721-61dd-43e0-acbf-c393015ae472 Phishing
2022-08-06 2 www.apple-payupdate.com/assets/1a8bdd59-d29a-4f5c-9c0e-95db4a7e0346 Phishing
2022-08-06 2 www.apple-payupdate.com/assets/3404164a-7be8-4945-91d2-f89a5c36b83f Phishing
2022-08-06 2 www.apple-payupdate.com/assets/bf5b46d0-b54c-44af-80c9-0c098b436b1c Phishing
2022-08-06 2 www.apple-payupdate.com/assets/012d7b23-db0d-49f2-89b7-61d0f70160e8 Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (9)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
[Mnemonic Passive DNS] contile.services.mozilla.com (1) 1114 No data No data 34.117.237.239
[Mnemonic Passive DNS] ocsp.digicert.com (2) 86 2012-11-29 12:49:49 UTC 2022-08-06 05:01:09 UTC 93.184.220.29
[Mnemonic Passive DNS] ocsp.pki.goog (1) 175 2017-06-14 07:23:31 UTC 2022-08-06 04:58:04 UTC 142.250.74.3
[Mnemonic Passive DNS] push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-08-06 05:12:46 UTC 44.242.32.27
[Mnemonic Passive DNS] firefox.settings.services.mozilla.com (2) 867 2016-03-17 08:25:01 UTC 2020-05-25 20:01:47 UTC 54.230.111.35
[Mnemonic Passive DNS] r3.o.lencr.org (4) 344 2020-12-02 08:52:13 UTC 2022-08-06 04:58:11 UTC 23.36.76.226
[Mnemonic Passive DNS] content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-08-06 04:57:51 UTC 54.230.111.99
[Mnemonic Passive DNS] www.apple-payupdate.com (47) 0 2022-08-04 21:34:06 UTC 2022-08-06 05:08:15 UTC 176.123.0.55 Unknown ranking
[Mnemonic Passive DNS] img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-08-05 06:49:03 UTC 34.120.237.76


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 176.123.0.55

Date UQ / IDS / BL URL IP
2022-08-09 05:25:38 +0000
0 - 0 - 2 https://wellsfargosafesecure.com/login 176.123.0.55
2022-08-09 00:16:19 +0000
0 - 0 - 13 wellsfargosafesecure.com/ 176.123.0.55
2022-08-08 15:19:18 +0000
0 - 0 - 5 ee-billing-update.com/ 176.123.0.55
2022-08-08 13:08:18 +0000
8 - 0 - 87 mail.apple-payupdate.com/login.php?sessionid= (...) 176.123.0.55
2022-08-08 12:53:30 +0000
8 - 0 - 87 www.apple-payupdate.com/login.php?sessionid=7 (...) 176.123.0.55
2022-08-08 12:38:31 +0000
8 - 0 - 87 mail.apple-payupdate.com/login.php?sessionid= (...) 176.123.0.55
2022-08-08 12:38:21 +0000
7 - 0 - 86 mail.apple-payupdate.com/login.php?sessionid= (...) 176.123.0.55
2022-08-08 12:23:31 +0000
8 - 0 - 87 mail.apple-payupdate.com/login.php?sessionid= (...) 176.123.0.55
2022-08-08 11:38:33 +0000
8 - 0 - 87 mail.apple-payupdate.com/login.php?sessionid= (...) 176.123.0.55
2022-08-08 11:38:32 +0000
8 - 0 - 87 www.apple-payupdate.com/login.php?sessionid=b (...) 176.123.0.55

Last 10 reports on ASN: Alexhost Srl

Date UQ / IDS / BL URL IP
2022-08-09 08:27:35 +0000
0 - 0 - 1 vxdig.buzz/ 176.123.6.37
2022-08-09 05:25:38 +0000
0 - 0 - 2 https://wellsfargosafesecure.com/login 176.123.0.55
2022-08-09 00:16:19 +0000
0 - 0 - 13 wellsfargosafesecure.com/ 176.123.0.55
2022-08-08 17:43:36 +0000
0 - 0 - 29 https://www.skk-id.de/de/s33.php 188.214.144.135
2022-08-08 15:19:18 +0000
0 - 0 - 5 ee-billing-update.com/ 176.123.0.55
2022-08-08 13:30:35 +0000
0 - 0 - 29 www.skk-id.de/de/s33.php 188.214.144.135
2022-08-08 13:08:18 +0000
8 - 0 - 87 mail.apple-payupdate.com/login.php?sessionid= (...) 176.123.0.55
2022-08-08 12:53:30 +0000
8 - 0 - 87 www.apple-payupdate.com/login.php?sessionid=7 (...) 176.123.0.55
2022-08-08 12:38:31 +0000
8 - 0 - 87 mail.apple-payupdate.com/login.php?sessionid= (...) 176.123.0.55
2022-08-08 12:38:21 +0000
7 - 0 - 86 mail.apple-payupdate.com/login.php?sessionid= (...) 176.123.0.55

No other reports on domain: apple-payupdate.com



JavaScript

Executed Scripts (6)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (65)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Content-Type, Alert, Backoff, Content-Length
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 06 Aug 2022 08:02:30 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: vknNwbTNWhy1mDPtQpgXe_ryaDyGttw76VfD0GQIgRliNPA_QT7dBw==
Age: 2153


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    c98c56ff7bc7ba547517573963f425e3
Sha1:   58c8dccc28ecd76424af6ed9988575a35cf8a0c2
Sha256: d57d9d5e87e8761ffdf790ff762307f5c823e8e8241781797373c10e076ec44e
                                        
                                            GET /login.php?sessionid=1ecead27955bfc318eae20ac2b0edea4 HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                         
                                         176.123.0.55
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.3.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9; path=/
Location: index.php
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: BYPASS
X-Server-Powered-By: Engintron


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (6616)
Size:   24745
Md5:    0e48e850100bc316f5b87ecc82e5a5b8
Sha1:   2ec65db69712e656a6df28136c4199d42f3466fa
Sha256: 7cf078a527683bce2c5a0554c2cd85d62300d4711e866d1596ab412cbc9b6300

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F055127A4794D0F76CB4DF8F290DF8E259258A63398A700F592C859DFFE9AC34"
Last-Modified: Thu, 04 Aug 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9867
Expires: Sat, 06 Aug 2022 11:22:50 GMT
Date: Sat, 06 Aug 2022 08:38:23 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-09-19-18-34-07.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.99
HTTP/2 200 OK
                                        
content-type: binary/octet-stream
content-length: 5348
last-modified: Sun, 31 Jul 2022 18:34:08 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 06 Aug 2022 04:15:27 GMT
etag: "578b9ff83ff3950ab2a3d1a8344d2938"
x-cache: Hit from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _nG8hUygYiuDqmiLldKmvbF2zB_CVEEhaQIaOb3_KG1N_PS65EZj-w==
age: 15777
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    578b9ff83ff3950ab2a3d1a8344d2938
Sha1:   39d48b67ba6aa45ec01767725e726cf9b0c87a70
Sha256: 35c99da9a5463a4788ceab7cf4b027bb25506cde28ace36c70d0bc924138f2f5
                                        
                                            GET /index.php HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9
Upgrade-Insecure-Requests: 1

                                         
                                         176.123.0.55
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:20 GMT
Content-Length: 0
Connection: keep-alive
X-Powered-By: PHP/7.3.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Location: login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: BYPASS
X-Server-Powered-By: Engintron


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
                                        
server: nginx
date: Sat, 06 Aug 2022 08:38:23 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /login.php?sessionid=35b0bce9d250429df012c0426f88d0bd HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9
Upgrade-Insecure-Requests: 1

                                         
                                         176.123.0.55
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: PHP/7.3.33
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: BYPASS
X-Server-Powered-By: Engintron
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (6616)
Size:   7863
Md5:    f0a69c81015da0d72d1a3d9f22e18f2c
Sha1:   06a3947c48199489ec3518e2988b8101774fbb7f
Sha256: 755003a2c71fc601e08bb1c562e768c6b8d4fab0dc343d50b5f2235137a88a44

Alerts:
  urlquery:
    - Phishing - Apple
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3353
Cache-Control: 'max-age=158059'
Date: Sat, 06 Aug 2022 08:38:23 GMT
Last-Modified: Sat, 06 Aug 2022 07:42:30 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /assets/fonts.css HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 29 Jun 2022 05:07:32 GMT
Expires: Mon, 05 Sep 2022 08:38:21 GMT
Cache-Control: max-age=2592000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: STALE
X-Server-Powered-By: Engintron
Content-Encoding: gzip


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with CRLF, LF line terminators
Size:   780
Md5:    f15e5c44ecb82c5048fea1a9ca4f4933
Sha1:   b176f4ad9df89ff74865a32b886a2c04207c2af5
Sha256: eaf01e5b1b41c193ef292941c36c45596d0cd5e6a8d4f81726c5622620eedaea

Alerts:
  urlquery:
    - Phishing - Apple
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 06 Aug 2022 08:38:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /assets/jquery.mask.js HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sat, 13 Nov 2021 06:51:28 GMT
Expires: Mon, 05 Sep 2022 08:38:21 GMT
Cache-Control: max-age=2592000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: STALE
X-Server-Powered-By: Engintron
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   5455
Md5:    ea8fa4a3a1ccba6be6733e548736eea5
Sha1:   4614bc18f02eabb918cd1a6d7003616aa5203668
Sha256: c5858ceb22abc21eca8af404a0d7374c5538cf5a9ac5bc1ad057e6c6dda1051f

Alerts:
  urlquery:
    - Phishing - Apple
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/21a065594bc09f981dfa8b2612e3ffa9fd0a7c88.css HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7
                                        
                                            GET /assets/inputmask.min.js HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sun, 14 Nov 2021 02:05:38 GMT
Expires: Mon, 05 Sep 2022 08:38:21 GMT
Cache-Control: max-age=2592000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: STALE
X-Server-Powered-By: Engintron
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (20001), with no line terminators
Size:   8584
Md5:    57fcff046c246ed4ebcc981ffb0ec8cb
Sha1:   4715347c5e2409cc0eb12528b951f8507b3d8ef3
Sha256: 958bb69b878f8ab73ef510ec344885753426db0cfdb93197d42d0d106d4be584

Alerts:
  urlquery:
    - Phishing - Apple
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/app.css HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 29 Jun 2022 05:19:16 GMT
Expires: Mon, 05 Sep 2022 08:38:21 GMT
Cache-Control: max-age=2592000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: STALE
X-Server-Powered-By: Engintron
Content-Encoding: gzip


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (64830), with no line terminators
Size:   39818
Md5:    bf0d9bbd3f35e33af0963f9307f4ebad
Sha1:   f182dd0e6bfbe05d431815429e512a309d401947
Sha256: a4129e168abc1595ee33f858817f182bfd7438db9a80d9d07d56e68440c4a254

Alerts:
  urlquery:
    - Phishing - Apple
                                        
                                            GET /assets/main.css HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 29 Jun 2022 05:19:22 GMT
Expires: Mon, 05 Sep 2022 08:38:21 GMT
Cache-Control: max-age=2592000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: STALE
X-Server-Powered-By: Engintron
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   35105
Md5:    7567c922c10bea485d058c259572b276
Sha1:   fe2927b9e9e7657883715c674eef501f97de47d7
Sha256: 964eca74ce320e3786a7942e3995dde31242679fdb7d3b4ccbf4fab36c804033

Alerts:
  urlquery:
    - Phishing - Apple
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         54.230.111.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Cache-Control, Pragma, Backoff, Last-Modified, ETag, Expires, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sat, 06 Aug 2022 08:16:16 GMT
Cache-Control: max-age=3600
Expires: Sat, 06 Aug 2022 08:47:10 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -NiN7519fAC8mOwe4hD-T-p5F1nWfLOI79r9T865BjO4NrRyKrs5uQ==
Age: 1329


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /assets/94e6ba80-032a-4187-b37e-18f97830e0f1 HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/7da4b777-b616-48b2-9741-e93188fa7b8e HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/5c35616a-1611-4f85-93fe-b1ed11b6b346 HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/adb102b6-ee7d-4a6d-b5e4-706884f08099 HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/32c447e0-bd8d-4cda-9dfc-685286e73a17 HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/6076ff54f3ed5209fe49e589acfe9a8bf360f99c.png HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Content-Length: 19254
Connection: keep-alive
Last-Modified: Wed, 29 Jun 2022 05:19:30 GMT
Expires: Wed, 05 Oct 2022 08:38:21 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: STALE
X-Server-Powered-By: Engintron
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Size:   19254
Md5:    c10d23df7c26dd0b1f735526c946bd55
Sha1:   6076ff54f3ed5209fe49e589acfe9a8bf360f99c
Sha256: 5ecc6c895208775df651b4483715575e4bb609fca20b710ce211595e28e9447c

Alerts:
  urlquery:
    - Phishing - Apple
                                        
                                            GET /assets/832568e0-277b-4f1e-a535-b424ac364ac8 HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/e5e3cf32-097b-4467-a9a4-1658237506bd HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/f48fd45e-da7c-44f5-bb5c-7585a5d61b63 HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/f5c6eb7f-0653-44bf-a1f6-eb39f3b9fa91 HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/faaa91df-9856-4930-b04b-7cb3d8dc1e34 HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/SFProIcons_regular.woff HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.apple-payupdate.com/assets/fonts.css
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Content-Length: 10380
Connection: keep-alive
Last-Modified: Wed, 29 Jun 2022 05:07:56 GMT
Expires: Wed, 05 Oct 2022 08:38:21 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: STALE
X-Server-Powered-By: Engintron
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 10380, version 1.0\012- data
Size:   10380
Md5:    9caca193fe7bff016ef17e26937711d9
Sha1:   121e523fe8f27d18017c2f7a056f2f14bf43bfc9
Sha256: 3b7d2b4c5417a697678081ed3b344955f0b25e694171178b0c01e029b4a18e8b

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/shared-icons.woff HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.apple-payupdate.com/assets/app.css
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Content-Length: 9552
Connection: keep-alive
Last-Modified: Wed, 29 Jun 2022 05:07:40 GMT
Expires: Wed, 05 Oct 2022 08:38:21 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: STALE
X-Server-Powered-By: Engintron
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 9552, version 1.0\012- data
Size:   9552
Md5:    e9e7624727ba14678b9a71b6f90745e3
Sha1:   0f0b7625cd06387c601f1632b0f69719b920f68a
Sha256: 6de3580fdeace0ff74927b2449e34587dd0b2a03c7711cf0087925e25429efe3

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/3d61a294-fadc-40e2-b331-f7cd94037998 HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/sf-pro-display_regular.woff2 HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.apple-payupdate.com/assets/fonts.css
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Content-Length: 141324
Connection: keep-alive
Last-Modified: Wed, 29 Jun 2022 05:07:38 GMT
Expires: Wed, 05 Oct 2022 08:38:21 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: STALE
X-Server-Powered-By: Engintron
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 141324, version 1.0\012- data
Size:   141324
Md5:    33a7d5404818b1b4e4c9d52607172871
Sha1:   a85c1eba34fc7b4d5991fd39e52731f39c257c4a
Sha256: 1cd2500f652e5f7611dc8735b1455d572a7aa1ccede57d8e375ff88023cf9ccd

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/ea96e48a-c100-435e-9a03-1793863e22df HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/49d37ddb-38c5-4b04-a007-6bef39f81120 HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/677a55de-d5b8-4b57-b48d-41e13bae85f1 HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/sf-pro-text_regular.woff2 HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.apple-payupdate.com/assets/fonts.css
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Content-Length: 155504
Connection: keep-alive
Last-Modified: Wed, 29 Jun 2022 05:08:02 GMT
Expires: Wed, 05 Oct 2022 08:38:21 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: STALE
X-Server-Powered-By: Engintron
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 155504, version 1.0\012- data
Size:   155504
Md5:    4487d81faed77dca1eedb32fe8874ce6
Sha1:   aa519492c8d0b48c5dbb6812b84948fcebef569b
Sha256: 78f1a8f3787f77f7ab4fcbb12c87f5cd412556c04991cdadaacddcd9b5a3e68a

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/c2fae7fa-0fb1-45f0-8366-be5ba335d235 HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2095
Cache-Control: max-age=86632
Date: Sat, 06 Aug 2022 08:38:24 GMT
Etag: "62eccfb9-1d7"
Expires: Sun, 07 Aug 2022 08:42:16 GMT
Last-Modified: Fri, 05 Aug 2022 08:07:21 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /assets/95e49370-cf85-4c65-913e-e79dfac4cfe4 HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/79f349a7-bca5-4a3e-9cc3-9bd866571017 HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/bfb9527d-ebf7-47a2-a203-cf091495c1a4 HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/eb3730db-5893-40c4-92b0-d54edaffdb5d HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/f9d572ee-4f6f-427a-a60e-50b56e5998cf HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/03d107a3-92d3-45f0-b31d-e948535cf5a8 HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/SFUIText-Regular.woff HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://www.apple-payupdate.com/assets/main.css
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Content-Length: 180124
Connection: keep-alive
Last-Modified: Wed, 29 Jun 2022 05:19:24 GMT
Expires: Wed, 05 Oct 2022 08:38:21 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: STALE
X-Server-Powered-By: Engintron
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Web Open Font Format, CFF, length 180124, version 1.0\012- data
Size:   180124
Md5:    671b0be82a6025072a4bf4653b6bdd67
Sha1:   21e78b926cca539d803fb24d7448b96875fe6f99
Sha256: 1dd142cb948458f8258fa4f7ba5e61bb3060e1b41dbc55eaefce115c3518759f

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/5614dc8c-ebd9-4cae-b0fb-91dfbdf23fc1 HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/e038a977-0275-4fa4-8243-dec3d6e2f4e4 HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/18cf3f80-a9bd-4867-b0a4-0c221e3fa7ce HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/1a18c530-8633-4494-a6cb-52a28973dbfc HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/f2036721-61dd-43e0-acbf-c393015ae472 HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/1a8bdd59-d29a-4f5c-9c0e-95db4a7e0346 HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/3404164a-7be8-4945-91d2-f89a5c36b83f HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/bf5b46d0-b54c-44af-80c9-0c098b436b1c HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/012d7b23-db0d-49f2-89b7-61d0f70160e8 HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /assets/favicon-16x16.png HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Content-Length: 624
Connection: keep-alive
Last-Modified: Wed, 29 Jun 2022 05:19:28 GMT
Expires: Wed, 05 Oct 2022 08:38:21 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: STALE
X-Server-Powered-By: Engintron
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit gray+alpha, non-interlaced\012- data
Size:   624
Md5:    ebb043d23f92e9b7e41e02889a3dc702
Sha1:   4ea952894c0cf890bcfd8ab1b2876c8300c91293
Sha256: abc860e2605db7e9892629183c107c042c9021a2783012e2753253394940e298
                                        
                                            GET /assets/https://www.icloud.com/system/cloudos2/current/static/apple-touch-icon.png HTTP/1.1 
Host: www.apple-payupdate.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.apple-payupdate.com/login.php?sessionid=35b0bce9d250429df012c0426f88d0bd
Cookie: PHPSESSID=105a2350dcbd5d02806978118592b2c9

                                         
                                         176.123.0.55
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: nginx
Date: Sat, 06 Aug 2022 08:38:21 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   238
Md5:    520f4af4fa2a221f0fcaf2bd8dd91190
Sha1:   ff7f6ecdcec4d56428d84c9380c81ede0f33fa4c
Sha256: e4af90c52865b7203efde020d8d7ca02b5b99f50b435770b37a34766772744a7
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: BD3PIJ/OBxhbb2wv0I4s3A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         44.242.32.27
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: GEw2cHupKFEI6z3BJCmZGwMJThQ=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "7D129895DD82ACE0D70FE0D261B7C2E924E869686CEDF20C238EFA6BFDF5E632"
Last-Modified: Wed, 03 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10891
Expires: Sat, 06 Aug 2022 11:39:56 GMT
Date: Sat, 06 Aug 2022 08:38:25 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "7D129895DD82ACE0D70FE0D261B7C2E924E869686CEDF20C238EFA6BFDF5E632"
Last-Modified: Wed, 03 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10891
Expires: Sat, 06 Aug 2022 11:39:56 GMT
Date: Sat, 06 Aug 2022 08:38:25 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "7D129895DD82ACE0D70FE0D261B7C2E924E869686CEDF20C238EFA6BFDF5E632"
Last-Modified: Wed, 03 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10891
Expires: Sat, 06 Aug 2022 11:39:56 GMT
Date: Sat, 06 Aug 2022 08:38:25 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38ac7a8b-efa3-4bb9-b35f-9a68e170d4eb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 9366
x-amzn-requestid: deb6aa1d-b429-4218-a41c-00c81d15973b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: WaMjcG0kIAMFbmg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62ed8e15-58f552ff2f58749d41a4879e;Sampled=0
x-amzn-remapped-date: Fri, 05 Aug 2022 21:39:33 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: hqRw_wvJLNz87-cTmti3sDlwvd_2st9PbUzxC8VQ_ShGSwS27ysRrw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 b8c4a4ca04bb1976e020396d211bc8dc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 05 Aug 2022 22:01:13 GMT
age: 38232
etag: "6eaa91dab23affc749e2ffe8d1452b4280b7b614"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9366
Md5:    126e9a90343e42dd18e69aa063bdb5cb
Sha1:   6eaa91dab23affc749e2ffe8d1452b4280b7b614
Sha256: 3d01b1ad823c09725f90507dd324ab2e17130768868641252c1299c51e01f449
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fecccae74-9298-410d-b1a0-83a3d7b983d6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 8506
x-amzn-requestid: 93ea4e31-b1e6-44b7-ba46-44b76496a453
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: WaNkNGB_oAMFkww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62ed8fb4-704275df3202a1b764f590a4;Sampled=0
x-amzn-remapped-date: Fri, 05 Aug 2022 21:46:28 GMT
x-amz-cf-pop: HIO50-C1, YVR50-C1
x-cache: Miss from cloudfront
x-amz-cf-id: cFw2UK9ZYkVM0f_zWHwLUPxjaFgf1wsEkeRtT7-kxA2z5QUYGIpZqw==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 4201bd1d1fc37ea7749b3bd1b64fce02.cloudfront.net (CloudFront), 1.1 google
date: Fri, 05 Aug 2022 21:47:22 GMT
etag: "1ef736718c08ae360d1903776f9c99c4e228705f"
content-type: image/jpeg
age: 39063
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8506
Md5:    f9a5115c54b2517b0274a5311abeef2a
Sha1:   1ef736718c08ae360d1903776f9c99c4e228705f
Sha256: b79b9b21fee63d4d27f573efdde582e1fe1baea14ca70ef88996c4e63e8d136a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa26223bd-d704-4f37-9bda-4a67147d87f9.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 7022
x-amzn-requestid: eb9ae10a-10d8-45fb-9c1c-9793344a899f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: WaMEqFdFoAMFpqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62ed8d50-7c3c82f33c75abd35bbed203;Sampled=0
x-amzn-remapped-date: Fri, 05 Aug 2022 21:36:16 GMT
x-amz-cf-pop: HIO50-C1, YVR50-C1
x-cache: Miss from cloudfront
x-amz-cf-id: ne2tmhRnJwvpF6rsjhmV1WuPMesMi6ZaU0AT9HTXflM265fNUJcGXw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 a02a98c09aaf2561c8ca019e473cf172.cloudfront.net (CloudFront), 1.1 google
date: Fri, 05 Aug 2022 21:50:20 GMT
etag: "de125f4ffd1f967c1557f082c41477891630539c"
content-type: image/jpeg
age: 38885
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7022
Md5:    f8ee35182a507e89b787ac718a80508c
Sha1:   de125f4ffd1f967c1557f082c41477891630539c
Sha256: 8def080600f8b45c3683dfb91586c9b03bf3fbb07437e9ab9dad816909cc3021
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb2e82c42-fd94-454a-912f-56867d09ec8d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 7007
x-amzn-requestid: 35d5361e-52fc-4daa-8cdb-954fb2a91144
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: WaMEzEyIoAMFfMA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62ed8d51-3bfec49b5c66188b79c38b88;Sampled=0
x-amzn-remapped-date: Fri, 05 Aug 2022 21:36:17 GMT
x-amz-cf-pop: HIO50-C1, YVR50-C1
x-cache: Miss from cloudfront
x-amz-cf-id: efpRqESHFgiyUdGH0RwYFscSl6pxv1OMptErBaPImBAc9wolDIkB1A==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 70b0c022caf458423e58ecbec40508f0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 05 Aug 2022 21:47:22 GMT
etag: "671abe46bc15fe88431e40416df266331a65f849"
content-type: image/jpeg
age: 39063
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7007
Md5:    1ed454c7b6a969da4f12c5dc57b0117e
Sha1:   671abe46bc15fe88431e40416df266331a65f849
Sha256: eb2cd92f0994a7bfea8151ce716bce18aa1bbbeca7ca66a786c09c3dff8a41e7
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7b4367f8-790d-45d9-b749-83fca7bfa1e6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 10504
x-amzn-requestid: 34564ee6-2bf2-459d-a5fc-9f3cef1b6217
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: WaMErFaVIAMFmtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62ed8d50-6cdebe3b2fa1a29e19641330;Sampled=0
x-amzn-remapped-date: Fri, 05 Aug 2022 21:36:16 GMT
x-amz-cf-pop: HIO50-C1, YVR50-C1
x-cache: Miss from cloudfront
x-amz-cf-id: FspeYidcRrCb91HxVBEEocpO7vWM-TlEfv_P6_K0aCtZc9TuPpkBTQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 a02a98c09aaf2561c8ca019e473cf172.cloudfront.net (CloudFront), 1.1 google
date: Fri, 05 Aug 2022 21:47:22 GMT
etag: "848c1131fddc851879696767331034e141eafee2"
content-type: image/jpeg
age: 39063
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10504
Md5:    b2c2899149c79a1b7a4bc3122a91f0b2
Sha1:   848c1131fddc851879696767331034e141eafee2
Sha256: b17dcf4444715ae1f716441b8a25fb2cf5356b2dc059a77a4665c19fc3459ae2
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18cefdf7-0e0b-43b6-b1bc-c07ca31eb953.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
                                        
server: nginx
content-length: 10164
x-amzn-requestid: 5d9edced-b83d-4acc-ab16-6c9e760847a6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: WaMEsFKyIAMFdKA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-62ed8d51-7568a9f253a2dc3e3c18af2f;Sampled=0
x-amzn-remapped-date: Fri, 05 Aug 2022 21:36:17 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: bMsJOtNoXD1j7gFo_mHxOQZ8ATJU6u9XkXl5_DlPcYuHPB4pqdbLWg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 05 Aug 2022 22:00:58 GMT
age: 38247
etag: "7606639404e300490feff4decc76ec565422437f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10164
Md5:    ac645545be7deae191864b0c82ea1957
Sha1:   7606639404e300490feff4decc76ec565422437f
Sha256: a7a855b8a7bce47926c972de67e6829e465ff403c98d6f24febf2728f091bf27